Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: fJlfa4zzTR3PLh2JuBtXxlvCx0aYXH/fpd7ZBzKGNZk=
Subject key identifier: 0B:2F:DD:BB:55:57:CE:0B:C2:47:24:B6:D0:91:2C:39:32:FD:7D:52
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0199FC8F818667C4EF0D534BDC20C51F0E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 1393
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: 9xCK4Qm3qJTMNpcFJJvPwSN3Utp9Wfzo4oEC+rykHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:81:86:67:c4:ef:0d:53:4b:dc:20:c5:1f:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=0b2fddbb5557ce0bc24724b6d0912c3932fd7d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:fa:b3:e4:bf:12:e7:2d:1f:a3:c9:20:b2:
c6:3f:cb:76:d1:a5:ac:83:f1:e3:23:0a:43:dd:51:
1d:19:3d:92:70:40:21:5a:14:55:48:6a:a6:f5:85:
9e:ef:af:5f:53:60:73:fd:6e:ef:70:e0:1b:bf:1e:
5e:43:9b:d7:00:8b:f0:73:9a:02:92:43:f4:bd:f8:
3d:ed:cd:be:3e:77:a0:ce:9c:c6:0f:87:a1:da:9a:
f7:6d:d6:7a:e8:91:67:c2:d1:2e:ba:c9:22:6d:bc:
65:23:3a:d8:62:99:ca:ee:84:a8:f5:52:26:51:6d:
69:21:cf:ce:e8:ef:bf:cf:10:8c:75:ed:bf:bb:4d:
f2:ed:ea:47:7d:47:d7:4b:9b:8e:6f:5f:64:e1:ee:
67:bd:7a:c6:27:e3:bd:67:5a:46:6f:9d:20:3c:4c:
96:64:fa:1b:1e:3b:b5:3e:06:21:be:01:f9:7b:05:
e8:fd:7d:37:da:de:cb:a1:12:6b:c9:32:32:7a:23:
65:e9:b3:58:24:76:f5:3d:be:e6:2d:98:bf:48:7e:
7c:4d:01:8d:76:de:4e:fd:ad:e9:dc:2b:1f:a0:43:
87:71:d8:6b:53:b1:e5:f4:5f:76:68:9f:1d:50:4c:
fd:29:0a:32:79:5e:bb:4b:ba:f1:88:30:1c:d4:eb:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:DD:BB:55:57:CE:0B:C2:47:24:B6:D0:91:2C:39:32:FD:7D:52
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:b9:11:44:06:2a:37:9a:84:ed:39:90:50:75:2e:d3:ac:
0a:20:ba:56:ae:7f:66:5b:c4:df:73:40:b2:a3:0f:84:e2:0f:
85:34:82:7a:5f:ef:68:ff:6d:0e:46:6e:a5:34:68:6c:c8:1d:
e0:88:c5:fe:8b:ad:98:0b:fb:d2:2d:c1:30:48:65:97:9f:dc:
f9:b6:49:18:b7:31:d2:44:1b:27:1f:85:2b:01:45:8a:4e:f1:
a7:59:fa:fa:25:52:a6:84:2e:c4:2f:f1:57:c6:dd:6c:dd:98:
07:84:16:cc:41:41:55:4d:51:02:88:be:d4:a6:ae:14:9e:f9:
cd:c3:19:6b:1f:8f:81:2e:73:b1:3f:b8:04:13:41:63:a8:15:
7e:88:11:a8:3d:4b:02:e7:fa:38:6e:1e:1a:34:ed:b2:54:50:
9f:c2:be:d2:31:da:90:be:98:c6:c8:77:d2:d2:71:10:94:d8:
f3:f9:56:dd:0b:1f:ca:ae:c2:89:4b:84:55:ec:31:08:22:a0:
3e:4d:43:c4:79:3b:ef:d0:0d:96:77:c9:b6:a5:d1:32:c6:fb:
88:7c:22:92:0e:28:b4:6d:80:1c:af:3e:7a:c3:1e:7a:af:b1:
e3:29:34:c8:0c:bf:74:b1:c6:c0:41:eb:28:41:b4:ec:a4:33:
f2:80:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:43 2025 by rpki-client